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Usual termination proofs for a functional program require to check all the possible reduction paths. 
Due to an exponential gap between the height and size of such the reduction tree, no naive formal¬ 
ization of termination proofs yields a connection to the polynomial complexity of the given program. 
We solve this problem employing the notion of minimal function graph, a set of pairs of a term and its 
normal form, which is defined as the least fixed point of a monotone operator. We show that termina¬ 
tion proofs for programs reducing under lexicographic path orders (LPOs for short) and polynomially 
quasi-interpretable can be optimally performed in a weak fragment of Peano arithmetic. This yields 
an alternative proof of the fact that every function computed by an LPO-terminating, polynomially 
quasi-interpretable program is computable in polynomial space. The formalization is indeed optimal 
since every polynomial-space computable function can be computed by such a program. The crucial 
observation is that inductive definitions of minimal function graphs under LPO-terminating programs 
can be approximated with transfinite induction along LPOs. 


1 Introduction 

1.1 Motivation 

The termination of a program states that any reduction under the program leads to a normal form. Recent 
developments in termination analysis of first order functional programs, or of term rewrite systems more 
specifically, have drawn interest in computational resource analysis, i.e., not just the termination but 
also the estimation of time/space-resources required to execute a given program, which includes the 
polynomial run-space complexity analysis. Usual termination proofs for a program require to check all 
the possible reduction paths under the program. Due to an exponential gap between the height and size 
of such the reduction tree, no naive termination proof yields a connection to the polynomial complexity 
of the given program. For the sake of optimal termination proofs, it seems necessary to discuss “all the 
possible reduction paths” by means of an alternative notion smaller in size than reduction trees. 

1.2 Backgrounds 

Stemming from ll2ll . there are various functional characterizations of polynomial-space computable 
functions Illl[l6l[l7l|9l, Those characterizations state that every poly-space computable function can 
be defined by a finite set of equations, i.e., by a functional program. Orienting those equations suitably, 
such programs reduce under a termination order, the lexicographic path orders (LPOs for short). The 
well-founded-ness of LPOs yields the termination of the reducing programs. 
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In the seminal work [5^, it was discussed, depending on the choice of a termination order, what 
mathematical axiom is necessary to formalize termination proofs by the termination order within Peano 
arithmetic PA that axiomatizes ordered semi-rings with mathematical induction. In case of multiset path 
orders (MPOs for short), termination proofs can be formalized in the fragment of PA with induction 
restricted to computably enumerable sets. This yields an alternative proof of the fact that every function 
computed by an MPO-terminating program is primitive recursive, cf. lITOl . The formalization is optimal 
since every primitive recursive function can be computed by an MPO-terminating program. In case of 
LPOs, termination proofs can be formalized in the fragment with induction restricted to expressions of 
the form “/ is total” for some computable function /. The formalization is optimal in the same sense as 
in case of MPOs, cf. If^ . 

In more recent works 13101, MPOs and LPOs are combined with polynomial quasi-interpretations 
(PQIs for short). Unlike (strict) polynomial interpretations |2l^ the existence of a quasi-interpretation 
does not tell us anything about termination. However, combined with these termination orders, the 
PQI can be a powerful method in computational resource analysis. Indeed, those functional programs 
characterizing poly-space computable functions that was motioned above admit PQIs. This means that 
every poly-space computable function can be computed by an LPO-terminating program that admits a 
PQI. Moreover, conversely, every function computed by such a program is computable in polynomial 
space 131 Theorem 1]. 

1.3 Outline 

In SectionlUwe fix the syntax of first order functional programs and the semantics in accordance with the 
syntax. In Section Owe present the definitions of LPOs and PQIs together with some examples, stating 
an application to poly-space computable functions (TheoremO E Theorem 1]). In SectionOwe present 
the framework of formalization. For an underlying formal system, a second order system of bounded 
arithmetic 111, which can be regarded as a weak fragment of PA, seems suitable since it is known that 
the system U 2 is complete for poly-space computable functions (Theorem l2l2l) . 

In iSl, the termination of a program reducing under an LPO <ipo is deduced by showing that, given 
a term t, a tree containing all the possible reduction chains starting with t is well founded under <lpo- 
The same construction of such reduction trees does not work in U 2 essentially because the exponentiation 
m 1 -)^ 2'” is not available. We lift the problem employing the notion of minimalfunction graph ifT^fTTlfTSl . 
a set of pairs of a term and its normal form. Given a term t, instead of constructing a reduction tree rooted 
at t, we construct a (subset of a) minimal function graph that stores the pair of t and a normal form of 
t. Typically, a minimal function graph is inductively defined, or in other words defined as fhe leasf fixed 
point of a monotone operator. Let us recall that the set of natural numbers is the least fixed poinf of fhe 
operator m G r(X) m = OV 3n G X s.t. m = n-h 1. As seen from fhis example, many instances of 
inductive definitions are induced by operators of the form t € r(X) 3si,... ,Sf: GX- - ■. Crucially, a 
minimal function graph under a program reducing under an LPO <ipo can be defined as fhe leasf fixed 
point of such an operator but also t G r(X) ,...,Sk G X Asi,. .. ,Sk <\po t ■■■ holds. Thanks to 

the additional condition si,...,Sk <ipo L the minimal function graphs under the program can be defined 
by <ipo-transfinife inducfion as well as inducfive definifions. In Section |5] fhis idea is discussed in more 
defails. 

In fhe main section, Secfion 0 fhe full defails abouf fhe formalizafion are given. Mosf of fhe efforf 
is devofed fo deduce in an appropriafe form of fransfinife inducfion along LPOs (Lemma |5]l. Based 
on fhe idea above, we fhen consfrucf a minimal function graph G for a given program R reducing under 
an LPO <ipo by <|po-transfinile induction (Theorem (3]). Since G stores all fhe pairs of a term and ifs 
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R-normal form, this means the termination of the program R. 

In Section|7]it is shown that the formalization presented in Section [^yields that every function com¬ 
puted by an LPO-terminating program that admits a PQI is poly-space computable (Corollary [3]l. This 
shows that the formalization is optimal since such programs can only compute poly-space computable 
functions as mentioned in Section [L2l 


2 Syntax and semantics of first order functional programs 


Throughout the paper, a program denotes a term rewrite system. We sometimes use unusual notations or 
formulations for the sake of simplification. More precise, widely accepted formulations can be found, 
e.g., in |[20l. 

Definition 1 (Constuctor-, basic-, terms, rewrite rules, sizes of terms). Let C and D be disjoint finite 
signatures, respectively of constructors and defined symbols, and V a countably infinite set of variables. 
We assume that C contains at least one constant. The sets T(CUD,V) of terms, T(C,V) of constructor 
terms, B(C U D, V) of basic terms and R(C U D, V) of rewrite rules are distinguished as follows. 


(Terms) t 

(Constructor terms) s 
(Basic terms) u 

(Rewrite rules) p 


x\c{ti,...,ti) \f{tu...,ti) gT(CUD,V); 
.r I c(5i,...,5i) gT(C,V); 

ns,,...,Sk) gB(CUD,V); 

u^t gR(CUD,V), 


where ;r G V, c G C, / G D, t,ti,... ,f/ G T(CUD, V), si,...,Sk£ T(C, V) and u G B(CUD, V). For such 
a class S(F, V) of terms, S(F) denotes the subset of closed terms. The size ||t|| of a term t is defined as 
||.r|| = 1 for a variable .r and ||/(fi,. ..,tk)\\ = l +Ly=i IIOll- 

Definition 2 (Subslifufions, quasi-reducible programs, rewrife relations), A program R is a finite subsef 
of R(C U D, V) consisting of rewrife rules of fhe form Z —> r such fhaf fhe variables occurring in r occur in 
I as well. A mapping 0 : V —>• S(F, V) from variables fo a sef S(F, V) of terms is called a substitution. For 
a term t G S(F, V), td denotes fhe resulf of replacing every variable .r wifh 6{x). A program R is quasi- 
reducible if, for any closed basic term t G B(CUF), fhere exisf a rule Z —)• r G R and a subslifufion 6 : 
V ^ T(C) such fhaf t = 16. We resfricf reductions fo fhose under call-by-value evaluation, or innermost 
reductions more precisely. For fhree terms t,u,v, we write t[u/v] fo denote fhe resulf of replacing an 
occurrence of v wifh u. If will nol be indicated which occurrence of v is replaced if no confusion likely 
arises. We write t A-r 5 if 5 = t[r6/l6] holds for some rule Z —> r G R and consfrucfor subsfilufion 
6 : V —7> T (C). We write fo denofe fhe reflexive and fransifive closure of -4^ and t sift s 
and 5 is a normal form. By definition, for any quasi-reducible program R, if t s and t is closed, fhen 
5GT(C)holds. 

A program R computes a funcfion if any closed basic ferm has a unique normal form in T (C). In Ibis 
case, for every k-ary funcfion symbol / G D, a funcfion |/| : T (C)^ —)• T (C) is defined by |/| (^i,..., 5^) = 
f{si,...,sk) -4^ 


3 Lexicographic path orders and quasi-interpretations 

Lexicographic pafh orders are recursive path orders wifh lexicographic sfafus only, whose varianf was 
infroduced in |[T3]1 . Recursive pafh orders wifh mulfisef sfafus only were infroduced in [8^^] and a modem 
formulation wifh bofh mulfisef and lexicographic sfafus can be found in |[20l page 211]. Lef <f be a 
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(strict) precedence, a well-founded partial order on a signature F = C U D. We always assume that every 
constructor is <F-minimal. The lexicographic path order (LPO for short) <|po induced by <f is defined 
recursively by the following three rules. 


1 . 

2 . 

3. 


^Ipo ti 


S <\pog{h,...,ti) 


(i G {!,...,/}) 

••• <\pog{tl,---,tl) 


<\po g{h,---,ti) 

1 — U—i ^Ipo U ^r+1 '^Ipo ' 


(/ <F g G D) 


Sk <1 


po ' 


f{si,...,Sk) <\pof{tl,---,tk) =t 


(/€D) 


We say that a program R reduces under <ipo if ^ <ipo ^ holds for each rule Z —)■ r G R and that R 
is LPO-terminating if there exists an LPO under which R reduces. We write s <|pj, t if 5 <ipo t results 
as an instance of the above case (Z = 1 11211^ . Corollary [T] is a consequence of the definition of LPOs, 
following from <F-minimality of constructors. 

Corollary 1, Ifs <ipo t and t G T(C), then s t and s G T(C). 

A quasi-interpretation (| • D for a signature F is a mapping from F to functions over naturals ful¬ 
filling (i) d/O : — )■ N for each Z:-ary function symbol / G F, (ii) (|/D(- < (|/D(- 

whenever m < n, (iii) nij < ... ,mQ for any j G {1,...,A:}, and (iv) 0 < d/D if / is a con- 

stanf. A quasi-inferprefafion d • D for a signafure F is exfended fo closed ferms T(F) by d/(Zi) • • • ,4)1) = 
d/Dddti D) • ■ •) d^D)- Such an inferprefafion d • D called a quasi-inferprefafion for a program R if drPD < 
dZ0D holds for each rule / —)■ r G R and for any consfrucfor subsfilufion 0 : V —)■ T(C). A program R ad¬ 
mits a polynomial quasi-interpretation (PQI for short) if fhere exisfs a quasi-inferprefafion d • [) for R such 
fhaf d/D is polynomially bounded for each / G F. A PQI d • D called kind 0 (or additive |4]) if, for each 
consfrucfor c G C, d^D(w^i, • • ■, >nk) = d + Ly=i holds for some consfanf d > 0. An LPO-ferminafing 
program R is called an LPO^"^y^^^ -program if R admits a kind 0 PQI. 


Theorem 1 (EJl). Every function computed by an -program is computable in polynomial space. 

Conversely, every polynomial-space computable function can be computed by an -program 

131 Theorem 1]. In IT] various examples of programs admitting (kind 0) PQIs are illustrated, including 
LpoP°h{0)-programs R|cs and Rqbf below. 

Example 1. The length of the longest common subsequences of two strings can be computed by a program 
R|cs 0 Example 6], which consists of the following rewrite rules defined over a signafure F = CUD 
where C = {0,s,e,a, b} and D = {max, Ics}. 


max(x,0) 

max(0,y) 

lcs(x,e) 

lcs(e,y) 


X 

y 

0 

0 


max(s(x),s(y)) 

lcs(i(x),i(y)) 

lcs(i(x),j(y)) 


s(max(x,y)) 

s(lcs(x,y)) (iG{a,b}) 

max(lcs(x,j(y)),lcs(i(x),y)) (i G {a,b}) 


Nafural numbers are builf of 0 and s and sfrings of a and b as a{u) = an for a sfring u G (a, b}*. The 
symbol e denofes fhe empfy sfring. Define a precedence <f on F by max <f Ics. Assuming fhaf every 
consfrucfor is <F-minimal, fhe program R|cs reduces under fhe LPO <ipo induced by <f. For insfance, 
fhe orienfafion max(lcs(x, b(y)), lcs(a(x),y)) <ipo lcs(a(x), b(y)) can be deduced as follows. The orienfa- 
fiony b(y) yields lcs(a(x),y) lcs(a(x), b(y)) whilex a(x) and b(y) lcs(a(x), b(y)) yield 
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lcs(x, b( 3 ^)) <1^^ lcs(a(x), b( 3 ^)). These together with max <f Ics yield max(lcs(;c, b(j)), lcs(a(x), 3 ^)) <1^^ 
lcs(a(x), b(y)). It can be seen that the program R|cs admits the kind 0 PQI d • D defined by 

dONde^ = 1, 

dsK^) = daDW = d^DW = 1+-^; 

dmax^(;c,y) = dlcs^(x,y) = max(;c,y). 

This is exemplified as dmax(lcs(x,b(y)),lcs(a(x),y))D = max(max(x, 1+y),max(l+x,y)) <max(l + 
X, 1 +y) = dlcs(a(x), b(y))D. Thus Theorem [T] implies fhaf fhe function |lcs] can be compufed in polyno¬ 
mial space. 

Example 2. The Quantified Boolean Formula (QBF) problem can be solved by a program Rqbf HI 
Example 36], which consisfs of fhe following rewrife rules defined over a signafure F = CUD where 
C = {0,s, nil,cons,T,_L,var,-i,V,3} and D = {=, not,or, in, verify,qbf}. 


not(T) 

-F 

_L 

not(J_) 

-F 

T 

or(T,x) 

-F 

T 

or(±,x) 

-F 

X 

0 = 0 


T 

s(x) = 0 

-F 

_L 

0 = s(x) 


_L 

s(x) = s(y) 

-F 

x = y 

in(x, nil) 

-F 

_L 

in(x,cons(y,y5)) 


or(x = 

verify(vari 


xs) 

—F in(x,x5) 



verify( 

=x. 

xs) 

— F not(verify(x, 

,X5)) 



verify(xVy,x5) —)■ or (verify(x,x5), verify(y,x5)) 
verify ((3x)y,x5) —)• or(verify(y,cons(x,x5)),verify(y,x5)) 

qbf(x) —)• verify(x, nil) 

The symbol T denofes fhe frue Boolean value while _L fhe false one. Boolean variables are encoded wifh 
{0,s}-ferms, i.e., wifh nafurals. Formulas are builf from variables operating var, V or 3. Without loss 
of generality, we can assume that every QBF is built up in this way. As usual, terms of the forms ={s,t), 
-'{t), V( 5 ,f) and 3(5,f) are respectively denoted as s = t, -< 1 , sVt and ( 35 )t. By definition, for a Boolean 
formula (p with Boolean variables xi,... ,Xk, |verifyl((p, [•••]) = T holds if and only if (p is true with the 
truth assignment that x/ = T if xy appears in the list [• • • ] and xy = J_ otherwise. 

Define a precedence <f over F by not,or, = <f in <f verify <f qbf. Assuming <F-minimality of 
constructor, the program Rqbf reduces under the FPO <ipo induced by <f. For instance, the orienta¬ 
tion or(verify(y,cons(x,x5)),verify(y,xi')) <ipo verify(3(x,y),xi') can be deduced as follows. As well as 
xs verify(3(x,y),x5), the orientation x <1^^, 3(x,y) yields x <1^^, verify(3(x,y),x5). These together 
with the assumption cons <f verify yield cons(x,xi') < 1 ^^^ verify(3(x,y),x5). This together with y 
3(x,y) yields verify(y,cons(x,x5)) <1^^ verify(3(x,y),x5) as well as verify(y,x5) <1^^ verify(3(x,y),x5). 
These orientations together with the assumption or <f verify now allow us to deduce the desired orien¬ 
tation or(verify(y,cons(x,x5)),verify(y,x5)) <1^^ verify(3(x,y),x5). 

Furthermore, let us define a PQI d • D for the signature F by 


d4 

= I 

if c is a constant. 

(|xi,...,Xi:D 

= l+Ly=l-^y 

if c G C with arity > 0, 

(]/)(xi,...,Xi) 

= max^^iXy 

if/GD\ {verify, qbf}, 

(verify) (x,y) 

= x + y, 


dqbf|)(x) 

= x-|-1. 
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Clearly the PQI d • D is kind 0. Then the program Rqbf admits the PQI. This is exemplified by the rule 
above as (|or(verify(y,cons(x,x5)),verify(y,x5))D = max(y + ( 1 +x+ X 5 ),y+X 5 ) = (l+x + y)+x 5 = 
(|verify( 3 (x,y),x 5 )D. Thus Theorem [T] implies that the function |qbf] can be computed in polynomial 
space. This is consistent with the well known fact that the QBF problem is PSPACE-complete. 


4 A system U 2 of second order bounded arithmetic 

In this section, we present the basics of second order bounded arithmetic following lH]. The original 
formulation is traced back to |ihll. The non-logical language Lba of first order bounded arithmetic consists 
of the constant 0, the successor S, the addition +, the multiplication •, \x\ = [log 2 (x+ 1)], the division 
by two [x/2j, the smash #{x,y) = 2W'bl and <■ It is easy to see that \m\ is equal to the number of bits in 
the binary representation of a natural m. In addition to these usual symbols, we assume that the language 
Lba contains max(x,y). The assumption makes no change if an underlying system is sufficiently strong. 

Definition 3 (Sharply-, bounded quantifiers, bounded formulas, S 2 ). Quantifiers of fhe form 3x{x < 
f A • • •) or \/x{x < t ^ • • •) for some ferm t are called bounded and quantifiers of fhe form {Qx 
are called sharply bounded. Bounded formulas confain no unbounded firsf order quanfifiers. The classes 
(/ € N) of bounded formulas are defined by counfing fhe number of alfernafions of bounded quanfifiers 
sfarfing wifh an exisfenfial one, buf ignoring sharply bounded ones. For each i € N, fhe firsf order sysfem 
S 2 of bounded arifhmefic is axiomafized wifh a sef BASIC of open axioms defining fhe LBA-symbols 
fogefher wifh fhe schema (Z^-PIND) of bif-wise induction for Z^-formulas. 

(p(0) AVx((p([x/2j) —> (p(x)) —> Vx(p(x) ((p E <I>) (<I>-PIND) 

The precise definition of fhe basic axioms BASIC can be found, e.g., in IT] page 101]. 

Definition 4 (Second order bounded formulas, U 2 ). In addition to the first order language, the language 
of second order bounded arithmetic contains second order variables X,T,Z,... ranging over sets and 
the membership relation E. In contrast to the classes Zl’, the classes of second order bounded 
formulas are defined by counting alternations of second order quantifiers starting with an existential 
one, but ignoring first order ones. By definition, Zq ' is the class of bounded formulas with no second 
order quantifiers. The second order system U 2 is axiomafized with BASIC, (Z^'^-PIND) and the axiom 
(Zq'-CA) of comprehension for Zq'- formulas. 

VxVX3T(Vy<t)(yEFEA(p(y,jc,A)) ((?> E <I>) (<I>-CA) 

Unlike first order ones, second order quantifiers have no explicit bounding. However, due to the 
presence of a bounding term t in the schema (Zq'-CA), one can only deduce the existence of a set with 
a bounded domain. 

Example 3. The axiom (Zq'-CA) of comprehension allows us to transform given sets X into another set 
Y via Zq'- definable operations without inessential encodings. For an easy example, assume that two sets 
U and V encode binary strings respectively of length m and n in such a way that J E U 4A “the 7 * bit of 
the string U is 1” and j ^ “the /*’ bit of the string U is 0” for each j < m. Then the concatenation 
W = U^V, the string U followed by V, is defined by (Zq '-CA) as follows. 

(Vy < m-|-n) [7 E VT EA ((7 < m Ay E U) V (m < 7 Ay — m E V))] 
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Definition 5 (Definable functions in formal systems). Let T be one of the formal systems defined above 
and <I> be a class of bounded formulas. A funclion / : —)• N is ^-definable in T if there exists a formula 
(p{xi,... ,Xk,y) G ‘I’ with no other free variables such that (p(x,y) expresses the relation f{x) = y (under 
the standard semantics) and T proves the sentence Vic 3\y(p{x,y). 

Theorem 2 (|6|). 1. A function is E^-definable in S 2 if and only if it is computable in polynomial 

time. 

2. A function is -definable in \]\ if and only if it is computable in polynomial space. 

To readers who are not familiar with second order bounded arithmetic, it might be of interest to 
outline the proof that every polynomial-space computable function can be defined in U^- The argument 
is commonly known as the divide-and-conquer method, which was originally used to show the classical 
inclusion NPSPACE C PSPACE ifT^ . 

Proof of the “if” direction of Theorem \2\2\ ( Outline). Suppose that a function / : > N is computable 

in polynomial space. This means that there exist a deterministic Turing machine M and a polynomial 
p ^ N such that, for any inputs mi,... ,mk, /(mi,... ,mk) can be computed by M while the head 
of M only visits a number of cells bounded by p{\mi\,. .., \mk\). Then, since the number of possible 
configurations under M on inputs m\,...,mk is bounded by for some polynomial q, the 

computation terminates in a step bounded by as well. 

Eet ... ,mk,n,WQ,W) denote a Zq ^-formula expressing that the set W encodes the concate¬ 

nation wi"'-■ •"'>V 2 in| of configurations under M, where wj is the next configuration of wj-i, writing 
Wj = NextM(w 2 -i) (1 < 7 < 2l"l). Reasoning informally in U 2 , the Ej’^-formula (p{m,n) := (Vw < 
2^^l'"l))31Tv4f(m,n,w,lT) can be deduced by (Z^'^-PIND) on n. In case n = 0,W can be defined iden¬ 
tical to NextM(>v). Eor the induction step, given a configuration wq < 2^(1'”!/ the induction hypothesis 
yields a set U such that ln/2\,wo,U) holds. Another instance of the induction hypothesis yields 

a set V such that [?i/2j,W 2 in|-i,E) holds. Since wo,IT) holds for 

the set IT := U'^V. 

Now instantiating n with 2^(1'”!) yields a set W such that 29(1'”!) JnitM(m),IT) holds for the 

initial configuration InitM(m) on inputs in. The set W yields the final configuralion and thus the result 
f{m) of the computation. The uniqueness of the result can be deduced in U 2 accordingly. □ 

The “only if” direction of Theorem l2l2l follows from a bit more general statement. 

Lemma 1. If IJ 2 proves 3y(p(xi,... ,Xk,y)for a -formula (p{xi,...,Xk,y) with no other free variables, 
then there exists a function / : N such that, for any naturals m = mi,... G N, (i) /(m) is 

computable with the use of space bounded by a polynomial in |mi |,..., \mk\, and (ii) (p{m,f(m)) holds 
under the standard semantics, where m denotes the numeral S'” (0) for a natural m. 

It is also known that the second order system axiomatized with the schema (Zj’^-IND), instead of 
(Ej’^-PIND), of the usual induction (p{0) A'ix{(p{x) (p(S(x))) —)■ 'dx(p{x) for -formulas, called V 2 , 
captures the exponential-time computable functions of polynomial growth rate in the sense of Theorem|2l 
Though there is no common notion about what is bounded arithmetic, the exponential function m 1 -^ 2"' 
is not definable in any exisfing system of bounded arithmetic. 

5 Minimal function graphs 

The minimal function graph semantics was described in lfT2l as denotational semantics, cf. |[23l Chap¬ 
ter 9], and afterward used for termination analysis of functional programs without exponential size- 
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explosions in ifTTl Chapter 24.2] and ifTSl . In this section, we explain how minimal function graphs 
work, how they are defined inductively, and how they can be defined wifhouf inducfive definitions. 

To see how minimal function graphs work, consider fhe program R|cs in Example [H Eel us observe 
thaf fhe following reduction sfarfing wifh fhe basic term lcs(a(a(£)), b(b(e))) is possible. 

Ics(a(a(e)),b(b(e))) 

-^Ri„ max(lcs(a(e), b(b(£))), lcs(a(a(£)), b(e))) 

-^Ri„ max(lcs(a(£), b(b(£))), max(lcs(a(£), b(£)), lcs(a(a(£)),£))) 

max(max(lcs(£, b(b(£))), lcs(a(£), b(£))), max(lcs(a(£), b(£)), lcs(a(a(£)),£))) 

In fhe reduction, fhe term t := lcs(a(£), b(£)) is duplicated, and hence cosily re-compulalions potentially 
occur. Eor fhe same reason, fhere can be an exponential explosion in fhe size of fhe reduction free roofed 
al lcs(a(a(£)), b(b(£))) fhal confains all fhe possible rewriting sequences sfarfing wifh fhe basic term. 
A minimal function graph G, or cache in ofher words, is defined so fhal G stores pairs of a basic lerm 
and ils normal form. Thus, once fhe term t is normalized lo 0 (because fhe Iwo slrings a and b have no 
common subsequence), fhe pair (t,0) is slored in G and any ofher reduclion of t can be simulaled by 
replacing fhe occurrence of t wifh 0 . 

Given a program R, a (varianf of) minimal funclion graph G is defined as fhe leasl fixed poinl of fhe 
following operator E over ,^(B(F) x T(C)), where X C B(F) x T(C). 

{l,s) € r(X) :<s=^ 31 —>■ r € R, 36 : V ^ T(C), 3 (toAo )5 • • • j (f||r||-i A||r||-i) S X s.l. 
t = ld & s= ((£6)[5oAo]---)[‘^lk||-iA|k||-i] 

The operator E is monolone, i.e., A C E => E(A) C E(E), and hence fhere exisls fhe leasl fixed poinf of 
E. Suppose fhal R is quasi-reducible. On one side, fhe fixed-ness of G yields fhal t -4^ s ^ {t,s) ^ G. 
On fhe ofher side, since fhe sel {(t, 5 ) 1 1 G B (F) & t 5 } is a fixed poinf of E, fhe leasl-ness of G yields 
fhal {t,s) ^ G ^ t -4^ s. Thus, lo conclude fhal every closed basic lerm has an (innermosl) R-normal 
form, if suffices to show fhal, for every term t G B(F), fhere exisls a term s such fhal {t,s) G G. Now 
fhere are Iwo imporlanf observalions. 

1. If suffices to show fhal, for every term f G B(F), fhere exisl a subset Gt G G and a lerm s such 

thaf (t,A G Gt- lit = 18 and 5 = ((£6)[5oAo] ‘‘) [‘^ll'i|-i A|kl|-i] definition of E above 

and, for each j < \\r\\, {tj,Sj) ^ Gt- holds for such a sef Gt C G, Ihen Gt can be simply defined as 
G, = {(t,A}UG,oU---UG,||^„_,Q' 

2. Addilionally suppose fhal fhe program R reduces under an EPO <ipo- Then if lurns oul fhal fhe 
definition of E is equivalenl to a form reslricled in such a way fhal tj <ipo t for each j < ||r||ll 

Eor Ihese reasons, fhe schema (Vf G B(F)) ((Vi <ipo ^ *P(0) ^ ® (F))<p(0 of Iransfinile 

induction along <ipo will imply fhe termination of a quasi-reducible EPO-ferminafing program R in fhe 
sense above. 


6 Formalizing LPO-termination proofs under PQIs in U 2 

In Ibis secfion, we show fhal, if R is a quasi-reducible EP0P°^>'(°) -program, Ihen an innermosl R-normal 
form of any closed basic lerm can be found in fhe sysfem U 2 (Theorem [3]). 

*To be precise, in IIIIIB], the minimal function graph was used to denote such a subset Gt for a given basic t. 

^Namely, every function computed by an <|pQ-reducing program is defined recursively along <ipo. Therefore, as a reviewer 
pointed out, in this case the minimal function graphs can be regarded as fixed-point semantics for recursive definitions of 
functions, cf. (T^ Chapter 10]. 
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Given a program R over a signature F = C U D, we use the notation Fr to denote the finite set 
{x£ \ \ x appears in some rule p G R} of variables. Let be an efficient binary eneoding for T(F, Vr)- 
terms. The efficiency means that: 

(i) t !-)> is Zq ^-definable in U^- 

(ii) There exists a polynomial (term) p{x) with a free variable x such that rt^l <p(lkll) (provably) 
holds for any t G T(F,Vr). 

Without loss of generality, we can assume that: 

(hi) iif|i < rf^|. 

(iv) if 5 is a proper subterm of t. 

Such an encoding can be defined, for example, by representing terms as directed graphs not as trees. 
Lemma 2. The relation <|po is -definable in U^- 

Proof (Sketch). It suffices to show that, given two terms s and t, the relation “there exists a derivation tree 
according to the rules [T]-[3] (on page 1361) that results in 5 <ipo t” is Zq ^-definable in U^- Let T denote such 
a derivation tree resulting in s <lpoL By induction according to the inductive definition of <|po it can be 
shown that the number of nodes in T is bounded by H^H • ||t ||. Hence, by the assumption |(ii)| on the encod¬ 
ing the code '"T”' of T is polynomially bounded in pH • ||t || and thus in '~ 5 ~' • '~t^. On the other hand, by 
definition, the relation <ipo G between two terms sq and to is reduced to a tuple sj <ipo tj (j = I,... ,k) 
of relations between some subterms ,..., 5 ^ of and subterms ti,..., of to- Thanks to the assumption 


any j G {1,...From these observations, it can be seen that the construction of the derivation tree T 
is performed in U^, and hence the relation 5 <ipo t is Zq ^-definable in U^- □ 

As observed in fjll, in which an optimal LPO-termination proof was described, every program R 
reducing under an LPO <ipo already reduces under a finite restriction <i of <|po for some £ G N and 
every quantifier of the form (Qs <£ t) can be regarded as a bounded one. Adopting the restriction, we 
introduce an even more restrictive relation <£ (I G N) motivated by the following properties of PQIs. 

Proposition 1, Let be a kind 0 PQl and t G B(F). Then the following two properties hold. 

P dfD < p(l'~f~'l) holds for some polynomial p. 

2. Suppose additionally that a program R admits the PQl d • ) and that t -4-r s holds. If s G T(C), 
then pll < dtD holds. If s = f{si,... ,Sk) G B(F), then || 5 j|| < (?!) holds for each j G {1,... ,A:}. 

Proof. Property [T] Let t = g{ti,...,ti). Since the PQl d • D 0, one can find a constant d 

depending only on the set C of constructors and the PQl d • D such that dt; D < d ■ ||ty || holds for any 
j G {1,...,/}. This yields a polynomial p such that (?!) < p(||f||) and thus (?!) < p{\~ tfi) holds by the 
assumption |(iii)| on the encoding 

Property |2l In case s G T(C), pH < d-^'D < dlD holds. In case s = f{s\,... ,Sk) G B (F), |k;|l < 
d-^yD < d'^D ^ df D holds for each y G { 1 ,... □ 

Definition 6 (T|(C), B^dF), <£, Let T^dC) denote a set {t G T(C) | ||f|| < i} of constructor terms 
and B^dF) a set {/(h ,.. ■ fik) £ B(F) | ||ti ||,..., ||fj(:|| < 1} of basic terms. Then we write s <£t if s <ipo t 
and additionally 5 G T^dC) UB^(F) hold. We use the notation 5 t {i = 1 1I2[[^ accordingly. Moreover, 
we define a lexicographic extension of <£ over T(C). For constructor terms ... , 5 ^, ti,... , 4 , we 
write d^i,... , 5 ^:) (ti,... ,4) if there exists an index i G {1,... ,^} such that sj = tj for every j < i, 
Si <f t i, and Sj G (C) for every j > i. 


(iv) on the encoding 


+ rL' 


< 


rvi+rioi 


i.e 


2l' P i+l’ h 1 < [ 21’ ^0 'l+l' ^0 'I /2J, holds for 
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Corollary |2] follows from the definitions of <£ and and from <F-minimality of constructors. 
Corollary 2. For two basic terms f{s \,... ,Sk),f{ti,. • • ,4) G B£(F), f{si,. ..,Sk) /(ti, • • • ,4) holds 

if and only if {si,..., s^) ( 4 , • • ■ > 4 ) holds. 

For most of interesting -programs including Example [U and |2j interpreting polynomials 

consist of +, ■, maxy^j xj together with additional constants. This motivates us to formalize PQIs limiting 
interpreting polynomial terms to those built up only from 0, S, +, • and max to make the formalization 
easier. Then the constraints (ii) and (iii) on PQIs follow from defining axioms for fhese function symbols. 

Lef us consider a reduction to -4^ t -4-]^ s under a program R admitting a kind 0 PQI d • D, where 
to,t G B(F) and s G T(C) UB(F). If s <ipo t for some LPO <ipo, then Proposition [T] yields a polynomial 
p such that s <p{fto^\) t holds by DefinitionHence we can assume that £ is (the result of substituting 
to for) a polynomial p(|x|). More precisely, £ can be expressed by an LBA-temi built up from 0 and 
|x|, |y|, |z|,... by S, + and •. By assumption, does not contain # nor [•/2J. Thus £ = £{x\,...,Xk) 
denotes a polynomial with non-negative coefficients in |xi |,..., |x<: |. Since £ contains no smash # in 
particular, 2^^^^ can be regarded as an LBA-term for any polynomial p{x). By the assumption ^ on 
the encoding is polynomially bounded in the size ||f|| of t, and hence < 2 F\\A\) for some 

polynomial p{x). Therefore any quantifier of fhe forms {Qs <i t), [Qt G T^(C)) and {Qt G B^dF)) can 
be freafed as a bounded one. 

We deduce fhe schema (Tlj,b,i (B^dF), <|) i of <£-fransfinife induction over Br(F) for Z^’^-formulas 

(Lemma (H). Since fhe relation f{s\ ,...,Sk) <f* f{t \,..., 4 ) relies on f he comparison (.s'!,.. ., sQ 
(fi,...,4) by Corollary m we previously have fo deduce fhe schema (Tlj,b,i (T^(C)*^, I of <f^- 
fransfinife induction over k-fuples of Tr(C)-ferms (LemmalU). We sfarf wifh deducing fhe insfance in fhe 
base case k = 1. 

Lemma 3. The following schema of <i-transfinite induction over T^dC) holds in Tl^, where tp G 

dVt G TrdC))(dV^ t)tp{s) ^ tp{t)) ^ dVf G Tt{C))(p{t) (Tlj.b,i dTrdC), <r)) 

Proof Reason in U^. Suppose ifJt G T^dC))d('^‘^ t)(p{s) —)• (p{t)) and lef t G T^dC). We show fhaf 
(pdO holds by dEj’^-PIND) on ’~F. The case '~F = 0 frivially holds. Suppose > 0 for induction sfep. 
By assumption, if suffices fo show fhaf (p{s) holds for any s <i t. Thus lef s <i t. Since t G T^dC), 5 is a 
proper subferm of t by Corollary [T] and <F-minimalily of consfrucfors. Thus, fhe assumption |(iv)| on fhe 
encoding yields '” 5 ”' < ['~f~'/2j, and hence (p{s) holds by induction hypofhesis. □ 

Remark 1. In fhe proof of Lemma[3l we employed a bif-wise form of course of values induction (p(0) A 
Vt(^Vs('~s~' < ['~t~'/2j —)• (p(s)) —> (p(t)) —5- Vt(pd0 for a Zj’^-formula (p(x}, which is nol an insfance of 
dEj’^-PIND). Formally, one should apply d^j’'-PIND) for fhe -formula y/(x) ^'^t ('~t^ < (p{t)) 

fo deduce (Vt G T^dC)) (p{t). To ease presenfafion, we will use similar informal argumenfs in fhe sequel. 


Lemma 4. The schema (Tl b.i dT^dC), <£) I can be extended to tuples ofTi{C)-terms, i.e., the following 


schema holds in where (p(T) = tpfi ,... , 4 ) G Zj’'. 

dVfG TfdC))(dV?<^?)(pd?) ^ ^ {ft eTi{C))(p{l) 


(TlJ.b,.dT,dC)^4-)) 


Proof We show fhaf fhe schema (|Tlj,b,i dT^dC)^, l holds in U 2 by (mefa) induction on k > 1. In case 

fTi{Cf-\<'t)) 


k= i, fhe schema is an insfance of (Tlj,b.i dT^d^), <r) i- Suppose fhaf k> \ and (TIj 


holds by induction hypofhesis. Assume fhaf 

dV4,...,4 G T£dC))ddVd5i,...,5A:) {ti,...fk))t(>{s\,---Fk) (pd4,---,4)) 


( 1 ) 














Naohi Eguchi 


43 


holds for some Z^’^-formula (p(fi,... , 4 ). Let (p_^\ex(t,t 2 , ■ ■ ■ ,tk), Y{t) Y<ti^) denote Zjd.formulas 
specified as follows. 

(p^t.x{t,t2,...,tk) := t2,...,tk € Tf(C) A (V(52,---,‘y;c) 

\f/{t) := (Vf 2 , • • • ,4 S T£(C)) (p(t,t 2 , • • • , 4 ); 

Vr<,(f) t €T£(C) A(V5<£0'/^(‘«)- 


Note, in particular, that Y{t) is still a Zjd.forniula since every quantifier of fhe form (V^ € T^(C)) can 
be regarded as a bounded one under which fhe class Zj’' is closed. One can see fhaf (p^\ex{t,l2, • • • , 4 ) 
and imply 4t2,---,4 eT^(C) and (y{s,S2,...,Sk) {t,t2,...,tk))(p{s,S2,...,Sk). Hence, by fhe 

assumpfion ([Til, V<e{^) implies (Vt2,...,4 € T£(C)) ((p^iex(f,f2,... ,4) —)• (p(f,f2, • • • ,4)), vvhich denotes 


(Vf2,...,4 GT£(C))((V(52,---,‘yt:) <'r {t2,...,tk))(p{t,Si,...,Sk) (p{t,t2,...,tk)). 

Thisfogefher wilh(Tl^b,i(T^(C)^^', yields (Vf2, ...,tk& T^(C)) «p(t,t2, • • • , 4 ), denofing t/r(t). This 

means fhaf (Vt € T£(C))((V5 <£ t)\i/{s) —> Y{t)) holds. Since G as noted above, fhis fogefher 
wifh (Tlj,b.i (T^(C),<f) I yields (Vt G T^(C))v^(t) and fhus (V4,... ,4 G Tf(C))(p(4, ... ,4) holds. □ 

Lemma 5 . Let F = C UD. The <i-transfinite induction over B£(F) holds in \]\, where (jo G Z^’'. 


(Vt G B^(F))((V^ G B^(F))(^ t ^ (p{s)) ^ (p{t)) ^ (Vf G Bf(F))(p (0 (TIj.m (B^F), <£)) 

Given a precedence <f on fhe finite signafure F, lef rk : F —>• N denote fhe rank, a finite function 
compatible wifh <f: rk(/) < rk(g) ^ f <y g- 

Proof Reason in U^- Assume fhe premise of (TLb,i (B£(F), <£) 1: 


(Vt G BKF))((V^ G B,(F))(^ <r t ^ (p{s)) ^ (p{t)) 


( 2 ) 


Lef g G D. We show fhaf (Vfi,... ,f/ G T£(C))(p(g(fi,... ,fi)) holds by (Zj^-PIND) on or in ofher 
words by finifary induction on rk(g). Lef t\,...fi G T^(C) and t := g(fi,... fi). By fhe assumpfion (O, 
if suffices fo show fhaf (p{s) holds for any 5 G B£(F) such fhaf 5 <i t. Thus, lef 5 G B£(F) and 5 <i t. 

Case. 5 f. In fhis case 5 q for some / G {1,...Since f, G T£(C), 5 G T£(C) as well by 
Corollary [T] and hence fhis case is excluded. 

Case, s := f{s\,. ..,Sk) <f* t\ In fhis case, / <f g and hence rk(/) < rk(g). This allows us fo reason 
as /2\. Thus fhe induction hypofhesis yields (p{s). 

Case. 5 := g(5i ,si) t: We show fhaf fhe following condition holds. 

(Vvi,...,v/ GT^(C))((V(mi,...,M/) (vi,...,V;))(p(g(Mi,...,«/)) ^ (p(g(vi,...,v/))) (3) 

Lef vi,..., V/ G T£(C). By Corollary |2l fhe premise (V(mi, ...(vi,... ,vi))q){g{ui,. ..,ui) of ^ 
yields (V/ <|* g(vi,..., v/)) (p{s'). On fhe ofher side, fhe previous fwo cases yield (V^' G B£(F)) ( 5 ' 
g(vi,...,v/) q)is')) {i = 4 1I2P and hence (V/ G B£(F))(5' <£ g(vi,... ,v;) —> ^{s')) holds. Therefore 

(p(g(vi,... ,v;)) holds by fhe assumption (l2]l, yielding fhe sfafemenf ([3]). Since ([3]) is fhe premise of an 
insfance of fhe schema (Tlj,b.i (T£(C) LemmaHyields (Vvi,... ,v/ G T£(C))(p(g(vi,... ,v/)), and 

fhus (p{g{si ,...,si)) holds in particular. □ 
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To derive, from (Tlj,b.i (B£(F), <f) i, the existence of a minimal function graph under an LPO-terminating 
program, we need the following technical lemma. 


Lemma 6. (in U2) Let be a kind 0 PQl for a signature F = C U D, t € B(F), s G T(F) and <ipo an 
LPO induced by a precedence <f- If s <ipo t and d^D < (|tD < f, then, for any basic subterm t' of s and 
for any s' G T(C) such that ^ holds for any basic subterm v ofs[s'/t']. 


Proof By <F-minimality of constructors, s' <ipo t' holds. Hence s[s'/t'] <ipo t from the assumption 
s <ipo t. This yields v <ipo t by the definition of LPOs. Write v = /(vi,. ■■ ,Vk) for some / G D and 
v\,...,Vk G T(C). Let i G {1,...,/:}. Then ||v;|| < (|v,-D < (|vD < ^ d^D- The last inequality 

follows from the monotonicity (ii) of the PQI (] • D. This yields ||v,|| < f and hence v <it. □ 

Theorem 3. (in U 2 ) Suppose that R is a quasi-reducible -program. Then, for any basic term 

t, there exists a minimal function graph G (in the sense of Section^ such that that {t,s) G G holds for 
an ^-normal form s oft. 


Proof. Suppose that R is a quasi-reducible LPO*’°*^^°^-program witnessed by an LPO <ipo and a kind 
0 PQI d ■ D and that is a finite restriction of <ipo- Let \i/i(x,y,X) denote a Zq ^-formula with no free 
variables other than x, y and X expressing that X C Br(F) X T^(C) is a set of pairs of terms such that 
{x,y) G X, and, for any {t,s) G X, d^'D < dlD < ^ and 3/ —> r G R, 30 : Vr —^ s-t. t = 19 and one of 

the following cases holds. 

1. 5 = re gT£(C). 

2. 3(^{lj,Sj) G X I 7 < ||r||) s.t. 5 = (^{rd)[so / to] ■ • •) [ 5 ||^||_i/f||r||_i], where s'[u/v] is identical if no v 
occurs in s'. 


Note that, since Vr is a finite set of variables, 30 : Pr —> T^dC) can be regarded as a (first order) bounded 
quantifier. By Proposition 1 1111 we can find a polynomial term p(x) such fhaf d^ D < Pdl'~^”'l) holds for any 
tGB(F). The resf of fhe proof is devoted fo deduce (Vf G BdF ))(35 G T^dC))3G for such 


a bounding polynomial p. Fix an inpuf basic term to G BdF) and lef (pe(t) denote fhe Zj’^-formula (3^ G 
T£dC))3G \fri{t,s,G), where i = pdl'~fo~'|)- Since to G B^dF), if suffices fo deduce (Vf G B£dF))(p£dO- By 
Lemma[5l fhis follows from (Vf G B^dF)) ddVi G B^ dF))d^ t —>■ ^ *P^dO)’ which is fhe premise 


of an insfance of (|Tlj,b.i dB^dF); <^) Thus lef t G B^dF) and assume fhe condition 


{'is G B£dF))d‘^ <e t <P£(s)). 


(4) 


Since R is quasi-reducible, fhere exisf a rule Z —> r G R and a subsfilufion 0 : Vr —)■ T^d^) ^och fhaf 
t = 16. The remaining argumenf splifs info fwo cases depending on fhe shape of rd. 

Case[T] r0 G T^dC): In fhis case ,rd ,G) holds for fhe singleton G := {{t,r6)}. 

Case[3 rd 0 T^dC): In fhis case fhere exisfs a basic subferm vq of r9. Fix a term uo G T^d^) such 
fhaf (|moD < d^oD- We show fhe following claim by finilary induction onm < ||r||. 

Claim 1. There exists a sequence (^{tj,Sj,Gj) \ j <m'^ of triplets such that, for each j < m, (i) tj <£ t, 
dii) \l/i{tj,Sj,Gj) holds, and (in) {{r6)[so/to]-■ ■)[sj/tf\ is not identical to {{r9)[so/to]-■-^Isj-i/tj^i] as 
long as (d^0)[‘5'oAo] • • •) [‘^ 7-1 A;- 1 ] ^ basic subterm. 

In fhe base case m = 0, lef to be an arbifrary basic subferm of rd. Then, since d^PD ^ dZ0D, to <e t 
follows from fhe definilion of LPOs. Hence, by fhe assumpfion (@1), fhere exisf a ferm G T^dC) and 
a sef Go such fhaf Yi{to,^o,Go) holds. Clearly, dr0)[so/fo] is nof identical to rd. For induction step. 
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suppose that there exists a sequence (^{tj,Sj,Gj) \ j < fulfilling the conditions (i)-(iii) in the claim. In 
case that ((r6)[5o/to] • • ■) [^m/tm] has no basic subterm, let = (vo,mo)- Otherwise, let f^+i be 

an arbitrary basic subterm. Then tm+i <i t holds by Lemma0 Hence, as in the base case, the assumption 
(01) yields a term s,n+i € T£(C) and a set G,„+i such that holds. By the choice of 

tm+\, {{rO)[so/tQ]---)[sm+\/tm+\] is not identical to {{re)[so/tQ]-■ ■)[s,n/tm]- 

Now let 5 := ((r6)[5oAo] • • •) [‘^lkl|-iAlkihi] ^ sequence (^{tj,Sj,Gj) \j < ||r||) witnessing the 
claim in case m = ||r|| — 1. Then 5 € T£(C) since |{/ G D | /appears in ((r6)[i'oAo] ‘‘A;]}l ^ 
All “ (k + 1) holds for each j < ||r|| by the condition (hi) in the claim. Defining a sef G by G = 

{(tA}u (u ^< 11^11 Gy^ now allows us fo conclude \j/e{t,^,G). □ 

7 Application 

In fhe lasf section, fo convince readers fhaf fhe formalization of ferminafion proofs described in Theo¬ 
rem [3] for LPO^°h(0)-programs is opfimal, we show fhaf fhe formalizalion yields an alternative proof of 
Theorem [T] i.e., fhaf LPO^°h(0).programs can only compufe polynomial-space compufable funclions. 
The nexf lemma ensures fhaf fhe sef G consfrucfed in Theorem|3]is indeed a minimal function graph. 

Lemma 7. Suppose that R is a quasi-reducible -program. Let Yeix,y,X) denote the Lq ^- 

fomiula defined in the proof of Theorem\^ Then, for any t € B(F) and for any t G T(C), t 5 if and 
only if3G \l/pQrf-i^^(t,s,G) holds under the standard semantics. 

Proof. Lef R reduce under an LPO <ipo- For fhe “if” direction, if can be shown fhaf (Vf G B(F))(V5 G 
T(C)) (3G Yp{ft^\){L^^G) =^t s) holds by (external) fransfinile induction along <ipo- For fhe “only 
if” direction, if can be shown fhaf (Vf G B(F))(V5 G T(C))(f -4-^ 5 => 3G \ffpQrf^\'^{t,s,G)) holds by 
induction on m, where -4-^ denotes fhe m-fold iferafion of -4|{. □ 

Now Theorem[3]and Lemma|7]yield an alternative proof of (a varianf of) Theorem[T] 

Corollary 3. Every function computed by a quasi-reducible -program is computable in poly¬ 

nomial space. 

Proof. By Theorem^ U 2 proves fhe formula 

QR(R) A LPO(R, <ipo) A PQI(R, d • D) ^ (Vf G B(F))(35 G Tp(|r,n|AC))3G t//,(jr,n|)(t,^,G), 

where QR(R), LPO(R, <ipo) and PQI(R, (| ■ D) respectively express fhaf any B(F)-term is reducible, R 
reduces under <ipo, and (V(Z —> r) G R)(V6 : Vr —> T(C))(|r0[) < (|/0D. By Lemma |2l LPO(R, <ipo) 
can be expressed wifh a ZQ^-formula, buf neifher QR(R) nor PQI (R, d • D) literally expressible wifh a 
bounded formula. Nonefheless, fhe proof can be easily modified fo a proof of fhe sfafemenf 

(Vt G B(F))(35 G TAC))(QRAR) A LPO(R, <ipo) A PQI^R, d A) ^ 3G Wt{t,s,G)), 

where I = p{\~tfi), and QR^dR) and PQI^dR, d • D) respectively express fhaf any B£(F)-term is re¬ 
ducible, and (V(Z ^ r) G R)(Ve : Vr TAC))^^) < l\iei Bofh QR^R) and PQIARJ • A can be 
regarded as Zq ^-formulas, and hence fhe formula q)e{t,s) := QR^dR) A LPOdR, <ipo) A PQI^dR, d' D) 

3G \j/iiL^,G) lies in Zj’^ 

Now suppose fhaf a function |f| : TdC)^ TdC) is computed by a quasi-reducible LPO^°h(o). 
program R for some Z:-ary function symbol f G D. Then Lemma[T]yields a polynomial-space compufable 
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function /: N* N such that (f (ti,..., tt), f{'~ti^,...,’~tk'^)) holds for any fi, .. ., € T (C) 

under the standard semantics. Hence, by assumption, t/^p(|rf((j (f(ii,... ,'~4~'),G) 

holds for some set G C B (F) x T (C). By Lemma|71 this means the correspondence [f | {ti,... ,tk) = ^ ^ 
f{'~ti ~',..., Therefore, '~|f|(fi,. ..,tk)^ can be computed with space bounded by a polynomial 

in ..., \'~tk~'\ and thus bounded by a polynomial in ||ti , ||tjt||- D 

8 Conclusion 

This work is concerned with optimal termination proofs for functional programs in the hope of establish¬ 
ing logical foundations of computational resource analysis. Optimal termination proofs were limited for 
programs that compute functions lying in complexity classes closed under exponentiation. In this paper, 
employing the notion of minimal function graph, we showed that termination proofs under 
programs can be optimally formalized in the second order system U 2 of bounded arithmetic that is com¬ 
plete for polynomial-space computable functions, lifting the limitation. The crucial idea is that inductive 
definitions of minimal function graphs under -programs can be approximated with transfinite 

induction along LPOs. As a small consequence, compared to the original result. Theorem [T] when we 
say “a program R computes a function”, the quasi-reducibility of R is explicitly needed to enable the 
formalization. 

Finally, let us call a program R an one if R reduces under an MPO (with product status 

only) and R admits a kind 0 PQI. In lH Theorem 42], Theorem [His refined so fhaf a funcfion can be 
compufed by an -program if and only if if is compufable in polynomial lime. The program 

Rics described in Example [His an example of -programs, and hence fhe lenglh of fhe longesl 

common subsequences is compufable even in polynomial lime. By Theorem 12111 if is quife nalural lo 
expecl fhaf minimal funcfion graphs under -programs can be conslrucfed in fhe firsl order 

system S^. However, we Ihen somehow have fo adopl fhe formula (Piit,s) = QR£(R) A LPO(R,<ipo 
) A PQ|£(R, d • D) —3G \l/i{t,s,G) (in fhe proof of Corollary [3]) to a Zj-formula, which is clearly more 
involved than the present case. 
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